conn-trace rule

[no] conn-trace rule [protocol {tcp | udp | any}] srcnet {<subnet> | all} srcport-start <startport> srcport-end <endport> dstnet {<ip-address> | all} dstport-start <startport> dstport-end <endport> vlan <vlan>

protocol	Specifies the protocol name or protocol type. Valid values are: • tcp (This is the default.) • udp • any (This includes both TCP and UDP.)
srcnet <subnet>	Specifies the IP address and mask for the traffic source. Use the following format: XXX.XXX.XXX.XXX/XX
srcnet all	Specifies all IPv4 addresses.
srcport-start <startport>	Specifies the starting port number for the traffic source.
srcport-end <endport>	Specifies the ending port number for the traffic source.
dstnet <ip-address>	Specifies the IP address and mask for the traffic destination. Use the following format: XXX.XXX.XXX.XXX/XX
dstnet all	Specifies all IPv4 addresses.
dstport-start <startport>	Specifies the starting port number for the traffic destination.
dstport-end <endport>	Specifies the ending port number for the destination.
vlan <vlan>	Specifies the VLAN number for the traffic source. Valid values are: • all for all VLANs. • Zero (0) for untagged VLANs. • VLAN numbers from 1 to 4094 for tagged VLANs.

Connection tracing rules enable you to determine to which SteelHeads the SteelHead Interceptor has redirected specific connections. Connection traces can be used as a debugging tool for troubleshooting issues with failing or unoptimized connections or connections requiring path selection.